|
PostSmile - ASPR 1.23 RC$ Registered ... how to find oep??
hi,
I was trying to help one friend of mine unpacking this program and I saw that it's different from other aspr I unpacked, last excepion is
009F309F 3100 XOR DWORD PTR DS:[EAX],EAX
009F30A1 EB 01 JMP SHORT 009F30A4
009F30A3 68 648F0500 PUSH 58F64
009F30A8 0000 ADD BYTE PTR DS:[EAX],AL
009F30AA 00EB ADD BL,CH
009F30AC 02E8 ADD CH,AL
009F30AE 0158 EB ADD DWORD PTR DS:[EAX-15],EBX
009F30B1 6A E8 PUSH -18
009F30B3 8DF4 LEA ESI,ESP ; Illegal use of register
009F30B5 FE ??? ; Unknown command
009F30B6 FF8B F08B0303 DEC DWORD PTR DS:[EBX+3038BF0]
009F30BC 45 INC EBP
009F30BD EC IN AL,DX ; I/O command
009F30BE 8945 FC MOV DWORD PTR SS:[EBP-4],EAX
009F30C1 8B4B 04 MOV ECX,DWORD PTR DS:[EBX+4]
009F30C4 8BD6 MOV EDX,ESI
009F30C6 8B45 FC MOV EAX,DWORD PTR SS:[EBP-4]
009F30C9 E8 CEFAFFFF CALL 009F2B9C
and there's no ret.... it also give a MsgBox with Protection Error
Error : 1
hxxp://www.PostSmile.com
Thanks in advance
loman
|